[Tails-dev] Tor Browser 4.5.3 is ready for testing

[Georg Koppen]

Hello,

Tor Browser 4.5.3-build2 is up for testing at

https://people.torproject.org/~gk/builds/4.5.3-build2/

This release contains a security update of Firefox to version 31.8.0esr
and a bunch of other improvements, above all an updated OpenSSL (to
version 1.0.1o), a fix for a crash bug visible with the security slider
level set to High and a backport of a Tor patch to improve usability
on websites.

Here comes the full change log:

Tor Browser 4.5.3 -- June 30 2015
 * All Platforms
   * Update Firefox to 31.8.0esr
   * Update OpenSSL to 1.0.1o
   * Update NoScript to 2.6.9.27
   * Update Torbutton to 1.9.2.8
 * Bug 16403: Set search parameters for Disconnect
 * Bug 14429: Make sure the automatic resizing is disabled
 * Translation updates
   * Bug 16397: Fix crash related to disabling SVG
   * Bug 16403: Set search parameters for Disconnect
   * Bug 16446: Update FTE bridge #1 fingerprint
   * Tor patch backport
 * Bug 16430: Allow DNS names with _ characters in them (fixes
nytimes.com)

Georg



signature.asc
Description: OpenPGP digital signature
___
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe from this list, send an empty email to 
tails-dev-unsubscr...@boum.org.

Re: [Tails-dev] Claws Mail bug getting (partially) solved

[Daniel Kahn Gillmor]

On Fri 2015-06-26 13:40:51 -0400, sajolida wrote:

 The Claws Mail bug is getting a solution in the case of queued emails:

 http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=2965

I'm glad to see this being addressed upstream!

 What would be the next steps for us to take advantage of it? I see that
 Claws Mail has a backport [2]. Shall we wait until the patch is
 officially released, then see if it's still worth time-wise to ask for
 an update of the backports?

 [1]: https://tails.boum.org/security/claws_mail_leaks_plaintext_to_imap/
 [2]: https://packages.debian.org/source/wheezy-backports/claws-mail

The traditional theory on debian-backports is that it's not a place to
address critical issues or security concerns -- fixes like this should
go into stable (via security.debian.org) or testing (via unstable)
first, before pushing them into backports.

  --dkg
___
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe from this list, send an empty email to 
tails-dev-unsubscr...@boum.org.